The Ghana Internet Safety Foundation (GISF, “we”, “us”) protects children, families and communities from online harm. People trust us with sensitive information, often at difficult moments, and we take that trust seriously. This policy explains what personal information we collect through this website, our CyberClinic Helpline (267) and our services, how we use it, who we share it with, and the choices and rights you have.
GISF is registered with the Data Protection Commission of Ghana as a data controller. Our registration details are available on request. We handle personal information in line with the Data Protection Act, 2012 (Act 843).
1. Information we collect
When you report online harm
Our reporting form asks what you want to report, where you saw it, a link to the content, and a description. You can report anonymously. We only ask for your name or contact details if you choose to give them so we can follow up with you.
Never send us copies of child sexual abuse images or videos. Sharing or downloading this material is illegal, even to report it. Send us the link and a description instead. Our team will handle the rest.
When you call the CyberClinic Helpline (267)
Our team may take notes of what you tell us so we can give you the right guidance, make referrals and follow up. You don’t have to give your name. Calls are recorded for training and quality purposes only. Recordings are stored securely, can only be accessed by authorised GISF staff, and are deleted after three months.
When you contact us, subscribe or register
- Contact and partnership enquiries: your name, email address, phone number, organisation and message.
- Newsletter: your name and email address.
- Training and event registration: your name, contact details, organisation and role, and any access or dietary needs you tell us about.
When you donate
Online donations are processed by our payment provider, Paystack. Paystack collects your card or Mobile Money details directly; GISF never sees or stores your full card number or PIN. We receive your name, email address, phone number, the amount and date of your donation, and a transaction reference. If you donate by direct Mobile Money transfer, we receive the details shown on the transaction.
Information collected automatically
Like most websites, our site records basic technical information such as your IP address, browser type and the pages you visit. We use this only to keep the site secure and working, and to understand how it is used. We do not use your IP address to identify you or to investigate reports. We also use Google Analytics to understand how visitors use our site, for example which pages are most visited and what devices people use. Google Analytics uses cookies and does not store your full IP address. It only runs if you accept analytics cookies (see section 8).
2. How we use your information
- To review and act on reports of online harm, including referring them to the right authority or platform
- To provide guidance, support and referrals through the CyberClinic Helpline and our other services
- To reply to your enquiries and manage partnerships
- To process donations, send receipts and keep financial records
- To send our newsletter and updates, if you have subscribed
- To run trainings and events you have registered for
- To keep our website and systems secure
- To produce statistics about online harm in Ghana for research and advocacy. These statistics are always anonymised and never identify you or anyone in a report.
We rely on your consent (for example, when you subscribe or choose to give your contact details), on our legitimate work to protect children and the public, and on our legal obligations (for example, financial record-keeping and co-operation with law enforcement).
3. Who we share information with
We never sell your personal information. We share it only where it is needed to protect someone, to act on a report, or to run our services:
- Authorities: reports that may involve a crime or a risk to a child may be referred to the Cyber Security Authority (CSA), the Ghana Police Service, the Department of Social Welfare or other relevant agencies.
- Online platforms: we may share links and details of harmful content with social media and technology companies so they can remove it. We do not share your identity with them without your agreement.
- Partner organisations: with your agreement, we may refer you to trusted partners for counselling, legal or other support.
- Service providers: companies that help us run the website and our services, such as our web host, Paystack and our email provider. They may only use your information to provide their service to us.
- Where the law requires it: for example, in response to a court order.
If we believe a child or another person is at immediate risk of serious harm, we may share information with the authorities to protect them, even without your consent. We will only share what is necessary.
4. Children and young people
Children and young people can use our reporting form and helpline, and we will always treat what they tell us with care. We collect only what we need to help. Where a child is at risk, our safeguarding duties come first, as described above. We do not knowingly add children under 18 to our newsletter or donor lists.
5. How long we keep information
- Reports, helpline notes and call recordings: three months, then deleted or anonymised. If we have referred a report to the authorities, they keep their own records under their own rules. We may keep a record longer only where the law requires it or an investigation is ongoing.
- Enquiries and event registrations: three months after our last contact or the end of the event.
- Newsletter: until you unsubscribe.
- Donation records: for as long as Ghana’s tax and accounting laws require.
6. How we protect your information
We use secure (HTTPS) connections, restrict access to reports and helpline records to trained staff who need it, and use strong passwords and access controls on our systems. No system is perfectly secure, but we review our safeguards regularly and will act quickly if anything goes wrong.
Some of our service providers store data on servers outside Ghana. Where that happens, we make sure your information has appropriate protection.
7. Your rights
Under the Data Protection Act, 2012, you can:
- ask what personal information we hold about you and get a copy
- ask us to correct information that is wrong
- ask us to delete your information, where we don’t need to keep it
- object to how we use your information, or withdraw your consent
- unsubscribe from our newsletter at any time using the link in every email
To use any of these rights, email info@gisfoundation.com. We may need to confirm who you are before we act, and we will reply within 21 days. If you’re not satisfied with our response, you can complain to the Data Protection Commission of Ghana (dataprotection.org.gh).
Please note that if you reported anonymously, we may not be able to link a report to you.
8. Cookies
Our website uses two kinds of cookies:
- Essential cookies that the site needs to work properly and securely. These are always on.
- Analytics cookies from Google Analytics, which help us understand how the site is used. These only run if you accept them in the cookie banner, and you can change your choice at any time.
We do not use advertising cookies. You can also block or delete cookies in your browser settings, or use Google’s opt-out add-on (tools.google.com/dlpage/gaoptout).
9. Links to other websites
Our website links to other organisations, such as government agencies and online platforms. We are not responsible for how they handle your information, so please read their privacy policies.
10. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.
11. Contact us
Ghana Internet Safety Foundation
Email: info@gisfoundation.com · Phone: +233 55 000 6737
Head Office: YMCA Building, Adjacent Passport Office, Adum, Kumasi. Accra Office: Darko Farms HQ, Nyaniba Estate, Osu.